Skip to main content

Change logs for security intelligence update version 1.459.601.0

This page lists newly added and updated threat detections included in security intelligence updates for Microsoft Defender Antivirus and other Microsoft antimalware. If you don’t find the latest security intelligence update version in the selector below, please refresh this page or let us know us know through the feedback smiley.

Looking for the latest update? Download the latest update

Released on

10/7/2026 2:16:30 PM

Added threat detections

Name Severity
Behavior:Win32/PlacidRivet.gen!nri severe
Behavior:Win32/RemcosRAT!atmn severe
Behavior:Win32/SheetRAT!atmn severe
Behavior:Win32/SuspInputDevReg.A severe
Trojan:BAT/AsyncRAT.CY!MTB severe
Trojan:JS/FormBook.DA!MTB severe
Trojan:MSIL/AgentTesla.RY!AMTB severe
Trojan:MSIL/Heracles.AC!MTB severe
Trojan:MSIL/KillAV.A!MTB severe
Trojan:MSIL/ShelbyLoader.DA!MTB severe
Trojan:MSIL/Urelas.AS!MTB severe
Trojan:NPM/PolinRider.SE severe
Trojan:NPM/PolinRider.SG severe
Trojan:NPM/Stealgen.LTSN!MTB severe
Trojan:PowerShell/AgentTesla.CZ!MTB severe
Trojan:PowerShell/Bitser!AMTB severe
Trojan:PowerShell/Boxter.AS!MTB severe
Trojan:PowerShell/TermFix.DI!MTB severe
Trojan:PowerShell/TermFix.DJ!MTB severe
Trojan:PowerShell/TermFix.DK!MTB severe
Trojan:PowerShell/TermFix.DL!MTB severe
Trojan:PowerShell/TermFix.DN!MTB severe
Trojan:Script/SvgStealer.AEC!MTB severe
Trojan:Script/SvgStealer.AED!MTB severe
Trojan:Win32/GuLoader.XH!MTB severe
Trojan:Win32/RevererseLoader.ZB!MTB severe
Trojan:Win32/RevShell.MUA!MTB severe
Trojan:Win32/RevShell.MUB!MTB severe
Trojan:Win32/SuspPosLoadz.ZH!MTB severe
Trojan:Win32/ValleyRAT.GA!MTB severe
Trojan:Win32/WinLNK.ABN!MTB severe
Trojan:Win32/WinLNK.ABO!MTB severe
Trojan:Win64/CollextorRat.CM!MTB severe
Trojan:Win64/DLLHijack.DAM!MTB severe
Trojan:Win64/FatMalloc.GV!MTB severe
Trojan:Win64/GiaPhucStealer.CL!MTB severe
Trojan:Win64/Greedy.A!MTB severe
Trojan:Win64/LunexLoader.DA!MTB severe
Trojan:Win64/OverlordRat.DA!MTB severe
Trojan:Win64/PoolInject.A!MTB severe
Trojan:Win64/ValleyRat.FR!MTB severe
Trojan:Win64/XWorm.AL!MTB severe
VirTool:Win64/Kelesz.A severe
VirTool:Win64/Myrddin.I severe
VirTool:Win64/Shelanjesz.A severe
VirTool:Win64/Sheloadesz.A severe

Updated threat detections

Name Severity
Adware:MacOS/Multiverze!rfn high
Adware:Win32/Tnega high
Backdoor:Linux/Dakkatoni.az!MTB severe
Backdoor:Linux/Gafgyt!rfn severe
Backdoor:Linux/Multiverze!rfn severe
Backdoor:Win32/Koceg!rfn severe
Backdoor:Win32/Zegost.GP!MTB severe
Behavior:Win32/a310Logger!atmn severe
Behavior:Win32/AgentTesla!atmn severe
Behavior:Win32/AmsiFailClickFixDownloader.AM severe
Behavior:Win32/Blackmoon!atmn severe
Behavior:Win32/CoinMiner!atmn severe
Behavior:Win32/CoinMiner.A!atmn severe
Behavior:Win32/DarkTortilla!atmn severe
Behavior:Win32/HeroinRAT!atmn severe
Behavior:Win32/HeroinRAT.A!atmn severe
Behavior:Win32/LummaStealer!atmn severe
Behavior:Win32/Mamadut.AT severe
Behavior:Win32/Mamadut.BT severe
Behavior:Win32/Mamadut.BV severe
Behavior:Win32/Mamadut.IA severe
Behavior:Win32/Mamadut.IF severe
Behavior:Win32/Mamadut.IK severe
Behavior:Win32/NanoCore!atmn severe
Behavior:Win32/NanoCore.A!atmn severe
Behavior:Win32/Neshta!atmn severe
Behavior:Win32/njrat!atmn severe
Behavior:Win32/OverlordRAT!atmn severe
Behavior:Win32/PcauiSideload.A!MTB severe
Behavior:Win32/PhantomStealer!atmn severe
Behavior:Win32/PlacidRivet.A!nri severe
Behavior:Win32/Prometei!atmn severe
Behavior:Win32/QuasarRAT!atmn severe
Behavior:Win32/QuasarRAT.A!atmn severe
Behavior:Win32/RatonRAT!atmn severe
Behavior:Win32/SalatStealer!atmn severe
Behavior:Win32/Socks5Systemz!atmn severe
Behavior:Win32/SparkRAT!atmn severe
Behavior:Win32/SparkRAT.A!atmn severe
Behavior:Win32/Stealc!atmn severe
Behavior:Win32/SuspUpdateAbuse.B severe
Behavior:Win32/ValleyRAT!atmn severe
Behavior:Win32/VenomRAT!atmn severe
Behavior:Win32/XWorm!atmn severe
Behavior:Win32/XWorm.A!atmn severe
Behavior:Win64/AchingSurgeon.A severe
Exploit:O97M/CVE-2017-0199!rfn severe
Exploit:Python/Leivion.A severe
Exploit:Win32/Watrmeera!rfn severe
Exploit:Win64/Sandsquarev!rfn severe
HackTool:AndroidOS/Mesploit!rfn high
HackTool:MSIL/AutoKMS!rfn high
HackTool:PowerShell/BloodHound high
HackTool:Python/Impacket!MSR high
HackTool:Python/Impacket.AB high
HackTool:Script/Multiverze!rfn high
HackTool:Win32/AutoKMS!MTB high
HackTool:Win32/BruteForce!AMTB high
HackTool:Win32/Crack!MTB high
HackTool:Win32/HackAV!MTB high
HackTool:Win32/Keygen high
HackTool:Win32/Meshagent.MBZ!MTB high
HackTool:Win32/Patch!rfn high
HackTool:Win32/Patcher!AMTB high
HackTool:Win64/AutoKMS!MTB high
Program:MacOS/Multiverze!rfn high
Program:Script/Multiverze!rfn high
Ransom:MSIL/Filecoder!rfn severe
Ransom:PowerShell/Filecoder!AMTB severe
Ransom:Win32/Basta!rfn severe
Ransom:Win32/BastaLoader!rfn severe
Ransom:Win32/IncRansom!rfn severe
Ransom:Win32/Lockbit!rfn severe
Ransom:Win32/NoEscape!rfn severe
Ransom:Win32/Play!rfn severe
Ransom:Win32/Qilinloader!rfn severe
Ransom:Win64/AzovCrypt.PA!MTB severe
Ransom:Win64/BlackByte!rfn severe
Ransom:Win64/Inc!rfn severe
Ransom:Win64/Rook!rfn severe
Ransom:Win64/Shinyspider!rfn severe
SupportScam:Win32/Screcwon!AMTB severe
Trojan:AndroidOS/Agent!AMTB severe
Trojan:AndroidOS/AVerseFalc!rfn severe
Trojan:BAT/KillAV!rfn severe
Trojan:BAT/Qakbot!rfn severe
Trojan:BAT/Starter.G!lnk severe
Trojan:HTML/Obfuse!rfn severe
Trojan:HTML/Pterodo!rfn severe
Trojan:HTML/Qakbot!rfn severe
Trojan:JS/AgentTesla!AMTB severe
Trojan:JS/ChatGPTStealer.GVA!MTB severe
Trojan:JS/Latrodectus!rfn severe
Trojan:JS/Phish!rfn severe
Trojan:JS/QakbotLNK!rfn severe
Trojan:Linux/Multiverze!rfn severe
Trojan:MacOS/Multiverze!rfn severe
Trojan:MSIL/AgentTesla.ABPF!MTB severe
Trojan:MSIL/Bladabindi!MTB severe
Trojan:MSIL/DarkCloud!MTB severe
Trojan:MSIL/Heracles!MTB severe
Trojan:MSIL/Jalapeno.A!MTB severe
Trojan:MSIL/Marsilia!rfn severe
Trojan:MSIL/Noon.AG!MTB severe
Trojan:MSIL/Polazert!rfn severe
Trojan:MSIL/ShelbyLoader.DA!MTB severe
Trojan:O97M/DDownloader!rfn severe
Trojan:PDF/Phish!atmn severe
Trojan:PowerShell/Agent.AKD severe
Trojan:PowerShell/QakBot!rfn severe
Trojan:PowerShell/Runner.GP!MTB severe
Trojan:PowerShell/SAgent.HAK!MTB severe
Trojan:PowerShell/TermFix.DC!MTB severe
Trojan:PowerShell/TermFix.DE!MTB severe
Trojan:PowerShell/TermFix.DF!MTB severe
Trojan:PowerShell/TermFix.DG!MTB severe
Trojan:Python/Multiverze!rfn severe
Trojan:Script/Malgent!MSR severe
Trojan:Script/Multiverze!rfn severe
Trojan:Script/Phish!MSR severe
Trojan:VBS/Emotet!rfn severe
Trojan:VBS/Obfus!rfn severe
Trojan:VBS/Obfuse!MSR severe
Trojan:VBS/Obfuse!rfn severe
Trojan:VBS/Pterodo!rfn severe
Trojan:VBS/Qakbot!rfn severe
Trojan:Win32/Agentz!rfn severe
Trojan:Win32/Amadey!rfn severe
Trojan:Win32/AutoitInject.DSK!MTB severe
Trojan:Win32/CryptInject!rfn severe
Trojan:Win32/DarkGate!rfn severe
Trojan:Win32/DllInject!rfn severe
Trojan:Win32/Egairtigado!rfn severe
Trojan:Win32/Enigmaprotector severe
Trojan:Win32/Etset!rfn severe
Trojan:Win32/Fauppod!rfn severe
Trojan:Win32/ForestTiger!rfn severe
Trojan:Win32/FormBook!rfn severe
Trojan:Win32/Graftor!rfn severe
Trojan:Win32/InjectPyinc.SA severe
Trojan:Win32/Kepavll!rfn severe
Trojan:Win32/KoiLoader!rfn severe
Trojan:Win32/Leonem!rfn severe
Trojan:Win32/Malex!rfn severe
Trojan:Win32/Malgent severe
Trojan:Win32/Malgent!MSR severe
Trojan:Win32/MereTam!rfn severe
Trojan:Win32/Mofksys!rfn severe
Trojan:Win32/PikaBot!rfn severe
Trojan:Win32/PlugX!rfn severe
Trojan:Win32/Pomal!rfn severe
Trojan:Win32/Posilod!rfn severe
Trojan:Win32/Primarypass!rfn severe
Trojan:Win32/PureRat!rfn severe
Trojan:Win32/Qakbot!rfn severe
Trojan:Win32/Qbot!rfn severe
Trojan:Win32/Qwexlafiba!rfn severe
Trojan:Win32/Ravartar!rfn severe
Trojan:Win32/Rozena!rfn severe
Trojan:Win32/Rugmi!MTB severe
Trojan:Win32/Seheq!rfn severe
Trojan:Win32/Shella!rfn severe
Trojan:Win32/ShellcodeRunner!MTB severe
Trojan:Win32/ShortSeek!rfn severe
Trojan:Win32/Suschil!rfn severe
Trojan:Win32/SuspLoadExec.NF!MTB severe
Trojan:Win32/Tiggre!rfn severe
Trojan:Win32/VMProtect severe
Trojan:Win32/Vobfus!rfn severe
Trojan:Win32/WinLNK!rfn severe
Trojan:Win32/Yogi.A!MTB severe
Trojan:Win32/Yomal!rfn severe
Trojan:Win32/Zloader!rfn severe
Trojan:Win32/Znyonm!rfn severe
Trojan:Win64/Agentb!MTB severe
Trojan:Win64/BumbleBee!rfn severe
Trojan:Win64/ClipBanker!MTB severe
Trojan:Win64/ClipBanker.NZD!MTB severe
Trojan:Win64/CobaltStrike!rfn severe
Trojan:Win64/CoinMiner!MTB severe
Trojan:Win64/CoinMiner.HM!MTB severe
Trojan:Win64/Coinminer.SJ!MTB severe
Trojan:Win64/CryptInject!rfn severe
Trojan:Win64/Dacic!MTB severe
Trojan:Win64/DllHijack!rfn severe
Trojan:Win64/DllHijack.LR!MTB severe
Trojan:Win64/DllInject!rfn severe
Trojan:Win64/Emotet!rfn severe
Trojan:Win64/Emotetcrypt!rfn severe
Trojan:Win64/EmotetPacker!rfn severe
Trojan:Win64/Filecoder.A!MTB severe
Trojan:Win64/GiaPhucStealer.CL!MTB severe
Trojan:Win64/Gobin!MTB severe
Trojan:Win64/KillAv!rfn severe
Trojan:Win64/KillAv.LR!MTB severe
Trojan:Win64/Latrodectus!rfn severe
Trojan:Win64/Lazy.LR!MTB severe
Trojan:Win64/Malgent!AMTB severe
Trojan:Win64/Nuitka!rfn severe
Trojan:Win64/OysterLoader!rfn severe
Trojan:Win64/Qakbot!rfn severe
Trojan:Win64/RomCom!rfn severe
Trojan:Win64/ShellLoader.A!MTB severe
Trojan:Win64/ShellLoader.YX!MTB severe
Trojan:Win64/Shelm!rfn severe
Trojan:Win64/Tedy!MTB severe
Trojan:Win64/Tedy!rfn severe
Trojan:Win64/Tedy.LR!MTB severe
Trojan:Win64/Tnega!MTB severe
Trojan:Win64/Turla!rfn severe
Trojan:Win64/Vidar!MTB severe
Trojan:Win64/Vidar.GVX!MTB severe
Trojan:Win64/Vidar.ME!MTB severe
Trojan:Win64/VMProtect!MTB severe
Trojan:Win64/Yogi!MTB severe
Trojan:Win64/Zusy!MTB severe
Trojan:Win64/Zusy!rfn severe
TrojanDownloader:BAT/Agent!rfn severe
TrojanDownloader:BAT/Phish!rfn severe
TrojanDownloader:BAT/QakBotLoader!rfn severe
TrojanDownloader:JS/Emotet!rfn severe
TrojanDownloader:JS/Qakbot!rfn severe
TrojanDownloader:JS/Qbot!rfn severe
TrojanDownloader:O97M/Emotet!rfn severe
TrojanDownloader:PDF/Gozi!rfn severe
TrojanDownloader:PDF/Qakbot!rfn severe
TrojanDownloader:PowerShell/Obfuse!rfn severe
TrojanDownloader:Win32/Phdet!rfn severe
TrojanSpy:AndroidOS/SMforw!rfn severe
VirTool:Win64/Chisel!rfn severe
VirTool:Win64/Injetesz.A severe